$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3438203d3e20323139313130.roa File: 326131333a633863313a3a2f33322d3438203d3e20323139313130.roa (raw, json) Hash identifier: cGZdSXuuzOKIoqdr5hUFzzLSPkhIhMJaOMKrWyrRuhw= Subject key identifier: CC:F5:1B:2C:DB:36:90:9B:D7:6A:D4:CA:89:31:85:73:0A:FC:AD:F0 Certificate issuer: /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Certificate serial: 4A5CD330E90CF758F8B7BAD9414EC877CD721CA6 Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3438203d3e20323139313130.roa Signing time: Thu 03 Sep 2026 13:19:46 +0000 ROA not before: Thu 03 Sep 2026 13:14:46 +0000 ROA not after: Thu 02 Sep 2027 13:19:46 +0000 asID: 219110 IP address blocks: 2a13:c8c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 10:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5c:d3:30:e9:0c:f7:58:f8:b7:ba:d9:41:4e:c8:77:cd:72:1c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE Validity Not Before: Sep 3 13:14:46 2026 GMT Not After : Sep 2 13:19:46 2027 GMT Subject: CN=CCF51B2CDB36909BD76AD4CA893185730AFCADF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:8c:1f:ef:b9:89:52:ed:ae:c3:25:12:82: de:fc:89:6b:91:4f:c1:74:74:eb:72:6f:67:88:49: 01:c8:e3:fb:53:d8:11:b1:e3:4c:5b:af:20:7e:b7: 0e:4a:97:f1:72:53:01:82:1d:b7:3d:43:12:71:d7: 4b:72:ce:35:78:17:6f:ad:b0:51:ec:fe:40:72:14: 28:cd:a6:29:9e:95:e3:ad:a0:1c:22:a6:0e:9d:b9: be:12:56:19:34:95:2f:85:2b:c8:98:f4:ad:ca:9e: 1c:2a:e5:fa:b8:f1:ba:9a:e9:56:3e:75:31:7a:86: ec:1a:48:5e:10:5a:12:0a:cb:fa:c8:1d:57:fc:12: 0e:0c:7e:cd:fb:1f:a4:73:0b:7a:4c:4d:59:57:a8: 6c:f4:cb:0f:13:3b:2c:09:82:e0:d7:3a:af:54:eb: 57:46:2a:4d:12:4d:4f:ce:99:11:11:d8:83:45:91: 79:16:41:e3:4b:cb:87:41:f2:9d:90:d5:a4:15:d7: a3:99:a7:ea:1b:63:53:87:b9:f0:87:7d:be:a3:f8: 1d:ce:c3:65:52:20:dd:7e:fc:ad:cc:b4:12:3c:44: 68:62:1a:b2:b0:a1:2a:c6:22:66:59:94:dd:d7:d6: 3d:65:7f:ab:92:1c:4c:85:fa:a0:3d:a0:0a:3d:db: b0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:1B:2C:DB:36:90:9B:D7:6A:D4:CA:89:31:85:73:0A:FC:AD:F0 X509v3 Authority Key Identifier: keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3438203d3e20323139313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c1::/32 Signature Algorithm: sha256WithRSAEncryption be:7e:19:68:4e:be:fa:b2:1c:5a:0f:7e:e7:b8:63:4e:6c:51: 00:7b:ef:c6:63:91:a4:0e:76:bd:35:53:55:79:bb:32:20:c5: d5:4b:1a:ee:fa:e3:8f:4b:35:5c:70:2a:1e:cb:24:f1:3b:7d: c5:42:3a:a9:d8:c1:82:86:60:b6:26:15:de:10:83:23:68:38: 2c:2c:96:4b:e8:78:30:ed:14:7b:dd:2c:ff:ca:b3:ef:5e:f9: c3:28:2c:26:94:ee:b7:0f:df:eb:65:66:58:e1:b4:d2:bc:d8: ff:9b:43:a8:3e:6a:fd:04:31:af:b8:04:fa:ff:f1:d7:42:50: b2:cc:67:b3:ad:9e:f5:09:c4:d0:75:a0:4e:58:d7:a2:21:7c: f4:8d:f1:5b:95:05:f8:46:8c:de:76:89:d8:66:26:6c:e3:f1: c4:b7:ea:9d:37:f1:9f:24:5a:8f:8b:28:41:b9:d5:ff:58:91: 18:2c:4d:40:37:f1:c7:79:b8:91:aa:fb:09:78:05:a3:27:fd: 26:26:98:4c:90:1a:85:c4:ac:39:1a:3d:a2:37:60:91:26:99: 67:a1:6b:53:89:ff:93:72:e3:22:f0:4a:e3:f5:44:13:c3:b9: da:f3:96:24:0c:12:2c:35:b2:bf:a8:0e:58:1e:24:7b:f6:77: ff:9c:c5:b7 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUSlzTMOkM91j4t7rZQU7Id81yHKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0 NzdBOTFBRTAeFw0yNjA5MDMxMzE0NDZaFw0yNzA5MDIxMzE5NDZaMDMxMTAvBgNV BAMTKENDRjUxQjJDREIzNjkwOUJENzZBRDRDQTg5MzE4NTczMEFGQ0FERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT1Iwf77mJUu2uwyUSgt78iWuR T8F0dOtyb2eISQHI4/tT2BGx40xbryB+tw5Kl/FyUwGCHbc9QxJx10tyzjV4F2+t sFHs/kByFCjNpimeleOtoBwipg6dub4SVhk0lS+FK8iY9K3Knhwq5fq48bqa6VY+ dTF6huwaSF4QWhIKy/rIHVf8Eg4Mfs37H6RzC3pMTVlXqGz0yw8TOywJguDXOq9U 61dGKk0STU/OmRER2INFkXkWQeNLy4dB8p2Q1aQV16OZp+obY1OHufCHfb6j+B3O w2VSIN1+/K3MtBI8RGhiGrKwoSrGImZZlN3X1j1lf6uSHEyF+qA9oAo927C7AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUzPUbLNs2kJvXatTKiTGFcwr8rfAwHwYDVR0j BBgwFoAUXvTHULGTXuS/f8JEGi7kkEd6ka4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzgvNUVGNEM3NTBCMTkzNUVFNEJGN0ZDMjQ0MUEyRUU0OTA0NzdBOTFBRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4 OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC81RUY0Qzc1MEIxOTM1RUU0QkY3RkMyNDQx QTJFRTQ5MDQ3N0E5MUFFLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS85YzBlZDA0Ni1mYTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvOC8zMjYxMzEz MzNhNjMzODYzMzEzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjMxMzkzMTMxMzAu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAqE8jBMA0GCSqGSIb3DQEBCwUAA4IBAQC+fhloTr76shxaD37n uGNObFEAe+/GY5GkDna9NVNVebsyIMXVSxru+uOPSzVccCoeyyTxO33FQjqp2MGC hmC2JhXeEIMjaDgsLJZL6Hgw7RR73Sz/yrPvXvnDKCwmlO63D9/rZWZY4bTSvNj/ m0OoPmr9BDGvuAT6//HXQlCyzGezrZ71CcTQdaBOWNeiIXz0jfFblQX4RozedonY ZiZs4/HEt+qdN/GfJFqPiyhBudX/WJEYLE1AN/HHebiRqvsJeAWjJ/0mJphMkBqF xKw5Gj2iN2CRJplnoWtTif+TcuMi8Erj9UQTw7na85YkDBIsNbK/qA5YHiR79nf/ nMW3 -----END CERTIFICATE-----Generated at Tue Sep 22 04:16:10 2026 by rpki-client